Federal CI/CD security guidance: Been there, done that

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) are telling development organizations to tighten up the security of their development pipelines or face the risk of damaging software supply chain attacks. 

agency attacks cd security cisa cybersecurity dev & devsecops development federal guidance infrastructure infrastructure security national national security national security agency nsa organizations pipelines risk security security guidance software software supply chain software supply chain attacks software supply chain security supply supply chain supply chain attacks